Privacy Policy

We collect only what we need to run the Service:

• Account email. We use your email address to create your account, send your one-time sign-in link, deliver your purchase confirmation, and provide support.
• Practice activity. We store which questions you answered and whether your answers were correct, so we can save your progress, build your Challenge Bank, and show your weak areas.
• Purchase records. When you buy access, we store a record of the purchase (such as the state, the access window, the amount, and a payment-processor reference) so we can grant and support your access. Card details are handled by Stripe and are never received or stored by us.
• Limited technical data. Like most websites, our hosting and security providers process basic technical information (such as IP address and request data) to deliver the Service securely and prevent abuse.

We do not ask for or store driver license or permit numbers, Social Security numbers, government ID, DMV appointment information, health or disability information, your date of birth, or your physical address (unless ever strictly required for billing).

• to provide, operate, and secure the Service;
• to authenticate you and deliver your sign-in link;
• to save your progress and personalize your study (Challenge Bank, weak areas);
• to process purchases and grant access;
• to respond to your support requests; and
• to detect, prevent, and address fraud, abuse, and security issues.

We do not sell or rent your personal information, and we do not use it for third-party advertising.

We share information only with the service providers that operate the Service, and only as needed for them to perform their function: Stripe (payment processing), Supabase (accounts and database), Vercel (hosting), Resend (email delivery), and Cloudflare (security and content delivery). We may also disclose information if required by law or to protect our rights, our users, or the public.

Card payments are processed by Stripe. We never see or store your full card details. Stripe processes your payment and returns only the confirmation we need to unlock your access. Stripe’s handling of your payment information is governed by Stripe’s own privacy policy.

We keep your account email and practice activity for as long as your account is active so we can provide the Service. We keep purchase records for as long as needed for accounting, tax, and dispute-resolution purposes. When you delete your account, we delete your account email and saved practice activity; limited purchase records may be retained where required by law.

We use reputable infrastructure providers and reasonable technical measures to protect your information, including encrypted connections and access controls. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit what we collect in the first place.

You can permanently delete your account and all saved progress at any time from your account page, or by contacting us at [email protected]. Depending on where you live, you may have additional rights — such as the right to access, correct, or delete your personal information, and the right not to be discriminated against for exercising those rights. California residents have rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what personal information we collect and the right to request deletion; because we do not sell or share personal information for cross-context behavioral advertising, no opt-out of sale is required. To exercise any right, contact [email protected].

The Service is intended for users age 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us at [email protected] and we will delete it.

We use only the cookies and local storage necessary to run the Service — for example, to keep you signed in, remember your language choice, and operate security checks. We do not use advertising or cross-site tracking cookies.

If you apply to the California Retest Relief Program, we collect only your email address, your name, and your confirmation that you are eligible. We use this information to set up and manage your free access and to email you about it.

We do not request or store a driver license number, Social Security number, date of birth, home address, or any government or DMV account credentials for this program. We do not sell this information and we do not use it for advertising. This preserves the data-minimization position described above.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above. Your continued use of the Service after a change takes effect constitutes acceptance of the updated policy.

Questions about privacy or to exercise your rights, contact [email protected].